Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-U76lTcPYG8UZaO-BtyW3Sb9gMk.roa
File: -U76lTcPYG8UZaO-BtyW3Sb9gMk.roa (raw, json)
Hash identifier: aqqJo85bsJODGBGpIJgP486TSTBxhlHgl2xwpB+J3xc=
Subject key identifier: F9:4E:FA:95:37:0F:60:6F:14:65:A3:BE:06:DC:96:DD:26:FD:80:C9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-U76lTcPYG8UZaO-BtyW3Sb9gMk.roa
Signing time: Thu 15 Sep 2022 02:43:10 +0000
ROA not before: Thu 15 Sep 2022 02:43:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F94EFA95370F606F1465A3BE06DC96DD26FD80C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:2a:8e:66:d6:92:22:81:74:ac:e9:82:4a:
27:82:a5:45:b8:d1:38:b2:81:7b:ee:4a:b9:94:c8:
1a:ef:c3:01:48:62:ae:13:f3:2f:64:da:6b:bf:0d:
bb:10:d1:d6:c9:b2:d4:f7:1c:d3:96:95:e6:ab:c7:
b1:b5:91:0f:d8:33:df:b5:01:3d:30:88:2a:d8:02:
71:a2:d9:8e:02:86:f6:17:be:a0:1b:93:46:af:fb:
27:86:2a:23:e8:a1:c8:0b:91:75:57:54:4d:6e:15:
e4:f9:a9:25:1c:f4:fd:51:a0:0c:49:51:ce:88:0b:
63:b3:af:64:95:3c:6a:1b:bb:ff:d3:cd:53:5d:47:
72:e5:83:0d:5a:52:32:82:2c:4f:bd:98:2a:74:47:
05:f9:21:1b:d9:86:1e:33:b4:30:2b:1a:6b:10:09:
50:6e:f8:3c:64:be:cd:85:e7:2b:56:8b:3d:cc:6f:
b7:dc:3b:11:cb:09:81:6d:ac:1a:1e:64:54:e5:5e:
29:7b:cd:89:57:73:2e:b2:57:bd:ee:6c:9f:9e:db:
24:2e:62:d3:de:ce:55:cb:b2:1c:4d:3c:4d:6b:e6:
10:fa:53:a7:e1:b4:2c:0d:a4:ff:7b:9e:04:4c:f8:
7d:f2:87:55:28:30:c8:c2:ea:eb:d9:72:2e:35:81:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4E:FA:95:37:0F:60:6F:14:65:A3:BE:06:DC:96:DD:26:FD:80:C9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-U76lTcPYG8UZaO-BtyW3Sb9gMk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.178.0/24
Signature Algorithm: sha256WithRSAEncryption
50:03:37:41:49:88:8e:3b:18:08:74:21:f9:15:b4:a6:72:c1:
d8:d9:54:a4:55:c5:a4:71:b2:e4:24:ef:3d:fb:1c:dd:47:55:
4c:b6:5b:ca:9c:1c:3a:a7:bb:59:1b:98:ae:63:ef:2d:62:d7:
2a:06:d0:83:24:25:83:ed:6f:2f:66:e5:68:41:96:2d:54:a4:
21:62:71:15:32:35:24:92:ee:d7:ee:20:94:f2:c0:33:f5:72:
97:59:a8:7b:ed:40:97:d1:26:44:f9:49:c2:62:b7:db:12:ce:
20:82:8a:5c:07:3a:6e:ed:d5:5d:bf:76:d6:1a:1d:41:1d:1a:
ae:23:8b:5e:fc:05:6b:86:ea:c4:37:22:de:f6:2e:01:5b:37:
bc:2c:43:09:f4:19:25:a2:ff:a4:0f:e2:89:a3:13:d9:38:89:
81:db:49:27:a7:a5:be:7d:2a:6e:47:b7:e6:39:7e:32:8b:69:
cc:26:14:15:81:fb:4e:65:2c:ec:00:f7:3e:c8:e9:28:29:0d:
f6:1d:bf:33:95:f5:d2:30:ff:2c:fc:4a:04:35:a8:8f:a2:16:
2c:50:95:6f:bc:57:0c:f4:99:6d:4b:2e:e0:26:c9:ad:c6:d0:
f2:fc:79:17:79:ee:57:d5:cb:93:48:a2:38:3a:5c:5a:b0:5e:
75:7c:76:86
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY5NEVGQTk1MzcwRjYw
NkYxNDY1QTNCRTA2REM5NkREMjZGRDgwQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH+SqOZtaSIoF0rOmCSieCpUW40TiygXvuSrmUyBrvwwFIYq4T
8y9k2mu/DbsQ0dbJstT3HNOWlearx7G1kQ/YM9+1AT0wiCrYAnGi2Y4ChvYXvqAb
k0av+yeGKiPoocgLkXVXVE1uFeT5qSUc9P1RoAxJUc6IC2Ozr2SVPGobu//TzVNd
R3Llgw1aUjKCLE+9mCp0RwX5IRvZhh4ztDArGmsQCVBu+Dxkvs2F5ytWiz3Mb7fc
OxHLCYFtrBoeZFTlXil7zYlXcy6yV73ubJ+e2yQuYtPezlXLshxNPE1r5hD6U6fh
tCwNpP97ngRM+H3yh1UoMMjC6uvZci41gcBVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+U76lTcPYG8UZaO+BtyW3Sb9gMkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLVU3NmxUY1BZRzhVWmFPLUJ0eVcz
U2I5Z01rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppsjAN
BgkqhkiG9w0BAQsFAAOCAQEAUAM3QUmIjjsYCHQh+RW0pnLB2NlUpFXFpHGy5CTv
Pfsc3UdVTLZbypwcOqe7WRuYrmPvLWLXKgbQgyQlg+1vL2blaEGWLVSkIWJxFTI1
JJLu1+4glPLAM/Vyl1moe+1Al9EmRPlJwmK32xLOIIKKXAc6bu3VXb921hodQR0a
riOLXvwFa4bqxDci3vYuAVs3vCxDCfQZJaL/pA/iiaMT2TiJgdtJJ6elvn0qbke3
5jl+MotpzCYUFYH7TmUs7AD3PsjpKCkN9h2/M5X10jD/LPxKBDWoj6IWLFCVb7xX
DPSZbUsu4CbJrcbQ8vx5F3nuV9XLk0iiODpcWrBedXx2hg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org